The attacker may entice the user to do the “jam a random fob into your laptop” step for them, for example by giving away USB drives at a conference.

If so, they need not come close to your laptop at all, certainly not close enough to change BIOS settings.